[Gllug] [OT] Disk Encryption

[Stephen Nelson-Smith]

Hello,

>> * FileVault

Seems FileVault creates one massive file in TimeMachine - not so handy
for restores.

> Whole disk encryption is very much preferred over individual folder or
> virtual disk encryption.

That appears to be the guidance of Group Security here.

> Please note that whole disk encryption only provides protection if the
> PC is stolen while powered off.
> So, very useful for the "left in a taxi" or "left on a train" scenarios!!!

Hrm - whereas file security this applies only if the file is open?

S.